Django CVE-2013-0305 Information Disclosure Vulnerability

Bugtraq ID:	61375
Class:	Unknown
CVE:	CVE-2013-0305
Remote:	Yes
Local:	No
Published:	Feb 19 2013 12:00AM
Updated:	Feb 19 2013 12:00AM
Credit:	Orange Tsai and Mozilla
Vulnerable:	Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Ubuntu Ubuntu Linux 11.10 i386 Ubuntu Ubuntu Linux 11.10 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 Red Hat Fedora 17 Django Django 1.3.1 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:

Django CVE-2013-0305 Information Disclosure Vulnerability

Django is prone to an information-disclosure vulnerability.

Successful exploits may allow an attacker to gain access to sensitive information.

Django versions prior to 1.3.6 and 1.4.4 are vulnerable.

NOTE: This issue was previously covered in BID 58061 (Django Denial of Service Vulnerability And Information Disclosure Vulnerabilities) but has been given its own record for better documentation.

Django CVE-2013-0305 Information Disclosure Vulnerability

An attacker can exploit these issues by using readily available utilities.

Django CVE-2013-0305 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Django CVE-2013-0305 Information Disclosure Vulnerability

References:

• Django Homepage (Django)